RE: [PHP] Re: Using register_globals
| From: | Jay Blanchard | Date: | Wed, 04 Jun 2003 16:51:27 +0000 |
| Subject: | RE: [PHP] Re: Using register_globals | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-150216@lists.php.net to get a copy of this message | ||
[snip]
The only reason there to initialize $explodenuke would be for security
(register_globals), and there are other cases like this. I generally
initialize variables before using them, but there's always going to be a
time when someone forgets. That shouldn't present a security hazard,
which is why I think register_globals should *always* be off.
[/snip]
In the corporate environment with multiple developers we have to
initialize every variable (it's a rule). We even scan code once a day
for variables that have not been declared. It's part of our
documentation.
Jay